Substance3D - Stager vulnerabilities

Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction – the victim must open a malicious file.

An Integer Overflow or Wraparound vulnerability in Substance3D - Stager versions 3.1.4 and earlier could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — the victim must open a malicious file.

An out-of-bounds read vulnerability in Substance3D - Stager versions 3.1.4 and earlier when parsing a crafted file could result in a read past the end of an allocated memory structure. An attacker could leverage this to execute code in the context of the current user. Exploitation requires user interaction — the victim must open a malicious file.

An out-of-bounds read vulnerability in Substance3D - Stager versions 3.1.4 and earlier when parsing a crafted file could result in a read past the end of an allocated memory structure. An attacker could leverage this to execute code in the context of the current user. Exploitation requires user interaction — the victim must open a malicious file.

An Integer Overflow or Wraparound vulnerability in Substance3D - Stager versions 3.1.4 and earlier could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, as the victim must open a malicious file.